兼容矩阵
当前组件版本、协议范围和已通过验证的组合。
既有成熟链路与原 48 项功能基线证据继续有效；线上 c429c4b 补录 FUN-049..054 后形成 54 项只增不减基线。Server 0.16.0 与 Management 0.4.0 已在隔离 devbox 证明旧 14 项能力、73 个 SDK 方法、19 类 Schema 16 存储和旧 Management Web/后台完整保留，同时保留 Registry、测试与受控部署新能力。回滚 0.15.0 必须恢复升级前 Schema 16 快照，不能只切软件。Runner standard 模式仍只按项目在稳定 shadow 后启用；任何未来增强不得删除旧入口、测试或缩小功能矩阵。
已验证组合
managed-distribution-v2-current
验证 managed-deployment legacy v1、Generic Package v2 与显式 OCI digest v2 的当前组合。Generic Package 的 content 描述保持可选，旧制品继续完整下载；新制品逐层/重组校验、Range 续传、同版本完整包兜底，并在两者均失败时零替换关闭。OCI 只允许项目 repository allowlist 内的完整 digest。两者复用既有 Registry Secret、中心权限/确认、Controller、Docker Proxy、健康替换、结果、失败恢复和回滚；devbox 已完成 Package 内容层首装、中断兜底、零网络回滚与续传再升级，以及 OCI Registry push/pull、缺失 digest 零替换失败、Package 回滚与 OCI 缓存再升级。该组合不声称本次重复执行 Management UI live 或 Robot 业务功能 live。
npm run test:compatibility · packages/contracts/managed-deployment.js / packages/contracts/test/managed-deployment.test.js / apps/server/packages/server/test/deploymentControl.test.js / apps/deployment-controller/src/controller.mjs / apps/deployment-controller/test/controller.test.mjs / deploy/project/bin/project-config.mjs / scripts/build-project-deployment-release.mjs / scripts/publish-project-images.mjs / scripts/verify-oci-distribution-provider.mjs / scripts/content-layer-catalog.mjs / scripts/content-layer-catalog.test.mjs / scripts/verify-content-layer-distribution.mjs / architecture/evidence/AI-PACKAGE-33e6b42-20260829.json / architecture/evidence/AI-OCI-GOV014-20260830-R1.json / architecture/audits/oci-distribution-provider-closure-2026-08-30.md / architecture/evidence/AI-CONTENT-GOV024-20260830-R1.json / architecture/audits/content-layer-distribution-closure-2026-08-30.mdproject-resource-v1alpha1-current
验证 Robot/Project Intelligence 内嵌的 Project Resource v1alpha1 当前组合：标准配置标识符与 Adapter/Sync 引用失败关闭、legacy/shadow/standard、Catalog 权限、Connector/Sync Registry 与 doctor、direct/tool/both/denied、仅两类受控写入、本地/网络同义、manual/scheduled/event、进程内 last-good 和 GitNexus 初始/增量索引。projectResourceConnector=not-yet-released 表示当前没有独立发行包，不表示内嵌 pilot 模块未验收；跨节点持久账本、高级索引和未来 Provider 不在本组合内。
npm run test:compatibility · architecture/schemas/project-resource-config.schema.json / architecture/schemas/project-resource-connector.schema.json / architecture/schemas/resource-synchronizer.schema.json / apps/robot/src/flynor_robot/project_resources.py / apps/robot/src/flynor_robot/project_resource_connector.py / apps/robot/src/flynor_robot/resource_synchronizer.py / apps/robot/src/flynor_robot/resource_tool_adapter.py / apps/robot/tests/test_project_resources.py / apps/robot/src/flynor_robot/standard_resource_acceptance.py / architecture/evidence/AI-RESOURCE-GOV019-20260830-R1.json / architecture/audits/project-resource-closure-2026-08-30.mdcapability-runtime-v1alpha1-current
验证当前成熟共享执行链：Agent control 的 execution/trace scope、Codex/Claude/Cursor fixture 的 start/query/continue/cancel、Robot Connector→Worker→Resource Tool→Agent→Outbox/Receipt、Server→PI signed Lease 网络资源与默认拒绝，以及 Server→Test Worker→Test MCP。旧入口、Provider 选择、fallback、队列与 Outbox 继续兼容；第三方 MCP/CLI 统一事务性 gateway、双 key 轮换/撤销、跨节点业务正文恢复和全平台企业 Secret backend 不在本组合内。
npm run test:compatibility · apps/robot/src/flynor_robot/agent_adapter.py / apps/robot/src/flynor_robot/standard_agent_acceptance.py / apps/robot/tests/test_agent_adapter.py / architecture/evidence/AI-CAPABILITY-GOV020-20260830-R1.json / architecture/audits/project-capability-runtime-closure-2026-08-30.mddevops-connector-v1alpha1-current
验证 DevOpsConnection、平台统一 credentialRef、宿主解析/Registry 装配职责分离、显式 Provider Registry、Fake/Choerodon 同契约、项目读写 scope、失败关闭、旧 generic/legacy 兼容、真实读取与专用任务写回证据；不宣称 Registry 自行解析秘密，也不宣称 Jira、GitLab Issues、Azure DevOps 或 Robot MCP 的未来结果归一已经实现。
npm run test:compatibility · architecture/schemas/devops-connector.schema.json / packages/contracts/devops.js / packages/integration-choerodon/src/devopsConnector.js / packages/integration-choerodon/test/devops-provider-registry.test.js / packages/integration-choerodon/test/devops-read-connector.test.js / packages/integration-choerodon/test/test-writeback-service.test.js / architecture/audits/devbox-devops-live-write-acceptance-2026-08-27.md / architecture/audits/devops-connector-closure-2026-08-30.mdruntime-release-0.15.0
验证 0.15.0 共享发布线与 Server；不推导 Tech Codex、BA Partner 或 Robot 的宿主级兼容。
npm run test:compatibility · packages/contracts/test/protocol.test.js / packages/sdk-typescript/test/client.test.js / packages/codex-runtime/test/managedRuntime.test.js / packages/evaluation/test/evaluation.test.js / apps/server/packages/server/test/server.test.jstest-execution-packages-0.2.0
验证项目范围 Intake、进行中迭代保护、期初数据父级排除、状态周期幂等提交、Server 执行与回写队列、独立租约、真实 Driver→Test MCP stdio 工具调用、Review 降级、策略派生、连接器幂等评论/状态 fixture、回执、证据目录、自包含 Test Runtime 归档及三条组件级 Deployment Acceptance Record；0.2.0 额外约束固定环境、请求级造数授权、AI-TEST-DATA- 标识、executionId 归属和保留策略。仍不代表五粮浓香真实监听清单、项目 Driver、测试数据或猪齿鱼写入已经通过业务验收。
npm run test:compatibility · packages/contracts/test/protocol.test.js / apps/test-worker/scripts/mcp-smoke-driver.mjs / apps/test-worker/test/worker.test.mjs / apps/test-worker/test/service.test.mjs / apps/server/packages/server/test/testExecutions.test.js / release/test-runtime.manifest.json / scripts/build-test-runtime-release.mjs / scripts/rehearse-test-runtime-release.mjs / infra/test-runtime/accept-test-runtime-host.sh / architecture/schemas/deployment-acceptance-record.schema.json / scripts/deployment-acceptance-record.test.mjs / packages/integration-choerodon/test/test-intake-service.test.js / packages/integration-choerodon/test/test-writeback-service.test.js / apps/test-mcp/scripts/smoke.js / apps/test-mcp/schemas/data-write-envelope.schema.json / apps/test-mcp/src/dataWriteEnvelope.js / apps/test-mcp/test/test-mcp.test.js / architecture/standards/test-data.mdserver-runtime-0.15.0
验证 Server 0.15.0、CLI、Protocol、Codex Runtime 与 Choerodon Integration 可构建为 7 包自包含归档，并在隔离目录完成 CLI 加载、回环启动、健康、持久化与重启；BA/Server 业务父子任务创建经标准 DevOps create operation 保留旧 action/receipt/marker/状态/凭据行为。归档携带统一 Deployment Acceptance Record 入口，但不代表 Linux/systemd、TLS、真实秘密注入、外部 DevOps 写入或生产流量已经验收。
npm run test:compatibility · release/server-runtime.manifest.json / scripts/build-server-runtime-release.mjs / scripts/rehearse-server-runtime-release.mjs / infra/server/accept-server-host.sh / architecture/schemas/deployment-acceptance-record.schema.json / scripts/deployment-acceptance-record.test.mjs / apps/server/packages/server/test/server.test.js / apps/server/packages/server/test/businessActionExecutor.test.js / apps/server/packages/server/test/businessTaskDevOpsFacade.test.js / apps/server/packages/server/test/choerodonBusinessDispatcher.test.js / packages/integration-choerodon/test/test-writeback-service.test.js / apps/server/packages/cli/test/upgradeFlow.test.js / packages/contracts/test/protocol.test.js / packages/sdk-typescript/test/client.test.js / packages/codex-runtime/test/managedRuntime.test.js / architecture/audits/server-business-devops-create-governance-2026-08-26.mdmanagement-runtime-0.2.0
验证 Management 0.2.0 与 Protocol、Server、SDK 的版本化定义、同源 Console Admin 人工确认写入、乐观并发冲突、Reader 发布投影、签名快照和失败关闭消费契约；自包含归档通过隔离目录 HTTP rehearsal 并携带统一 Deployment Acceptance Record 入口，但不代表公司身份、组织级 RBAC、多角色审批或全新 Linux 主机已验收。
npm run test:compatibility · release/management-runtime.manifest.json / scripts/build-management-runtime-release.mjs / scripts/rehearse-management-runtime-release.mjs / infra/management/accept-management-host.sh / architecture/schemas/deployment-acceptance-record.schema.json / scripts/deployment-acceptance-record.test.mjs / apps/management/assets/registry-console.html / apps/management/assets/registry-console.js / apps/management/tests/registry.test.mjs / packages/contracts/test/protocol.test.js / apps/server/packages/server/test/managementSnapshot.test.js / packages/sdk-typescript/test/client.test.jsmanagement-runtime-0.3.0
验证 Management 0.3.0 与 Protocol 0.15.0、Server 0.15.0 和 SDK 0.15.0：运维预配组织主体目录、操作级 RBAC、human Author/Publisher 职责分离、服务端 confirmed=true、乐观并发、主体与目录版本审计、Reader 投影、旧 admin/reader 回退、Ed25519 签名快照、重启恢复、实际 Server 消费及篡改失败关闭均通过。当前目录不冒充实时 IdP/HR 同步或资源级 ABAC；TLS 与裸机 systemd 仍按目标机发布检查执行。
npm run test:compatibility · architecture/evidence/AI-MANAGEMENT-GOV002-20260830-R1.json / architecture/audits/management-organization-governance-closure-2026-08-30.md / release/management-runtime.manifest.json / scripts/build-management-runtime-release.mjs / scripts/rehearse-management-runtime-release.mjs / apps/management/src/registry-auth.mjs / apps/management/schemas/management-principals.schema.json / apps/management/assets/registry-console.js / apps/management/tests/registry.test.mjs / apps/server/packages/server/test/managementSnapshot.test.js / deploy/standard/bin/accept-management.mjsrobot-release-0.1.0-structural
验证 Robot 0.1.0 的无凭据发布预览、精确工具版本与 image lock v2 门禁、20 服务/5 digest/零 build 的 Release Bundle、public-key-only 安全目录、独立 Resource/Agent/Runtime Ledger 模式模板、显式通道/Worker 拓扑和统一 Deployment Acceptance Record；干净 13a5bd1 fixture 归档隔离 rehearsal 通过，SHA-256 为 f1194a38e354b31f03cf731912af8d066b801a710c85e4e3e1a6674b9d16d07c。当前主机没有 Docker，不代表真实镜像推送、Compose 原生解析、Registry pull、Linux 启动、通道往返或回滚已验收。
npm run test:compatibility · release/robot-runtime.manifest.json / release/robot-images.schema.json / scripts/publish-robot-images.mjs / scripts/robot-image-publish.test.mjs / scripts/build-robot-release-bundle.mjs / scripts/rehearse-robot-release-bundle.mjs / scripts/robot-release-bundle.test.mjs / infra/robot/accept-robot-host.sh / apps/robot/schemas/deployment-config.schema.json / architecture/schemas/deployment-acceptance-record.schema.json / scripts/deployment-acceptance-record.test.mjs / architecture/audits/robot-agent-tool-projection-governance-2026-08-26.md / architecture/audits/robot-realtime-devops-mcp-governance-2026-08-26.md / architecture/audits/runtime-state-and-native-tool-governance-2026-08-26.mdproject-intelligence-release-0.1.0-structural
验证 Project Intelligence 0.1.0 从 Robot App image lock 生成一个服务、一个 digest、零 build、零入站端口、只读项目/公钥挂载、持久 Capability/Runtime 元数据账本模板的无源码归档，并校验配置资产、容器加固、独立 systemd、签名资源/Expert 任务、公开 Agent 续跑组件契约和统一 Deployment Acceptance Record；干净 13a5bd1 fixture 归档 SHA-256 为 382dfa9f3e531a196fe2841ffbf8c73f5dff5bc09b1e9cf3d35387a85f22453a。当前主机没有 Docker，不代表新 Python 代码已进入真实镜像，也不代表 Registry pull、Compose 原生解析、Linux 启动、Server 注册、真实项目工具或 Relay 往返已验收。
npm run test:compatibility · release/project-intelligence-runtime.manifest.json / release/robot-images.schema.json / scripts/build-project-intelligence-release.mjs / scripts/rehearse-project-intelligence-release.mjs / scripts/project-intelligence-release.test.mjs / infra/project-intelligence/flynor-project-intelligence.service / infra/project-intelligence/accept-project-intelligence-host.sh / architecture/schemas/deployment-acceptance-record.schema.json / scripts/deployment-acceptance-record.test.mjs / apps/robot/src/flynor_robot/capability_security.py / apps/server/packages/server/src/capabilityLeaseIssuer.js / apps/server/packages/server/src/projectIntelligenceRelay.js / apps/robot/tests/test_project_intelligence_node.py / architecture/audits/project-intelligence-expert-capability-governance-2026-08-26.md / architecture/audits/runtime-state-and-native-tool-governance-2026-08-26.mdtest-runner-contract-v1
验证 Runner Dispatch 不携带回调凭据，Result 使用完整七状态和 BUSINESS/INFRASTRUCTURE 失败分类，并拒绝重复身份、未分类失败及带凭据证据 URL。Test Worker Project Runner Adapter 进一步验证 legacy/shadow/standard、scoped Secret、单次成熟执行和同响应比较；本机固定测试库只读 live 与 devbox Compose 实际 Runner 证据见 AI-PROJECT-RUNNER-20260829-R2。旧入口仍按兼容策略保留。
npm run test:compatibility · packages/contracts/test-runner.js / packages/contracts/test/test-runner.test.js / architecture/test-integration.manifest.json / architecture/schemas/test-integration.schema.json / architecture/adrs/0009-test-management-runner-browser-boundaries.mdserver-runtime-0.16.0-legacy-superset
验证 Server 0.16.0 自包含八包归档、旧 0.15.0 的 14 项能力与 73 个 SDK 方法完整保留，以及 Schema 16 的 19 类存储在隔离 devbox 单向升级到 Schema 17 后不丢失；新版重启、迁移快照恢复、恢复 Schema 16 后回滚旧版均通过。
npm run test:compatibility · architecture/legacy-production-baseline.manifest.json / architecture/evidence/AI-LEGACY-SUPERSET-GOV025-20260830-R1.json / architecture/audits/legacy-production-superset-closure-2026-08-30.md / release/server-runtime.manifest.json / scripts/build-server-runtime-release.mjs / scripts/rehearse-server-runtime-release.mjs / scripts/verify-legacy-superset-runtime.mjs / apps/server/packages/server/src/migrations.js / apps/server/packages/server/test/server.test.js / packages/sdk-typescript/test/client.test.jsmanagement-runtime-0.4.0-legacy-superset
验证 Management 0.4.0 自包含四包归档同时提供旧 Management 健康入口、六个主要 SPA 路由、真实 Vue JS/CSS、后台服务与新版 Registry Console；组织 RBAC、职责分离、服务端确认、乐观并发、签名快照和旧 admin/reader 回退继续通过。
npm run test:compatibility · architecture/evidence/AI-LEGACY-SUPERSET-GOV025-20260830-R1.json / architecture/audits/legacy-production-superset-closure-2026-08-30.md / release/management-runtime.manifest.json / scripts/build-management-runtime-release.mjs / scripts/rehearse-management-runtime-release.mjs / apps/management/src/http-server.mjs / apps/management/src/registry-http.mjs / apps/management/ui/src/App.vue / apps/management/tests/registry.test.mjs发布规则
- 正式发布必须声明支持的 protocol 主次版本范围。
- 共享包同一 release line 保持相同版本。
- 客户端版本可独立演进，但必须通过 Server 契约测试。
- 原型组件不得宣称生产兼容承诺。
- 废弃字段至少保留一个正式发布窗口，并给出迁移路径。
- BA Partner 是唯一 BA 客户端；Flynor 能力只从 Management 发布的项目目录加载，不存在独立 BA worker、第二套 BA 客户端或仓库内置 BA 能力目录。
- Choerodon v1 配置、命令和协议别名从通用接口正式发布起至少保留两个正式小版本且不少于 90 天。
- 上层业务改为依赖 DevOps Connector 前，必须同时通过 Fake Adapter 通用契约测试与 Choerodon Adapter 契约测试。
- Project Resource Connector 通用运行时发布前，content-connector、Robot/Project Intelligence 配置、Test MCP 工具清单和项目专用入口继续作为 legacy 兼容基线。
- 资源消费者切换前必须完成 legacy/standard 只读影子比对；带副作用资源禁止双写。
- 本地与远程 Capability Transport 必须使用相同 capabilityId/version、参数/结果 Schema、租约、确认、分页、新鲜度、证据和审计语义。
- Worker Runtime 只能获得任务级 Capability Lease 明确授权的工具交集；真实资源凭据不得进入 Worker、Agent Adapter、Project Intelligence、Robot Connector 或端侧。
- 旧 capability-adapter、standard-worker、agent-connector、robot-connector、model-connector、Project Intelligence 工具名和 Robot/Test Worker 任务入口至少保留两个正式小版本且不少于 90 天。
- managed-deployment legacy v1、带可选内容目录/完整包兜底的 Generic Package v2 与 OCI digest v2 必须共用命令权限、Controller 生命周期、健康、结果和回滚语义；Provider 不得分叉 Compose。